This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
File: j6zLrHFHe5QOXNQQPj7uYdthWRU.mft (raw, json)
Hash identifier: ZqSCZ0XGDnUjZUb4/kbPmyqAyu5gvykmWzHwRMH/4lo=
Subject key identifier: A4:BD:C1:22:BB:FF:C6:B8:5A:CE:A1:5E:1C:BE:40:BC:D4:F6:59:A9
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Certificate issuer: /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial: 019AF277419572C622E3BB204BE819A5EE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
Manifest number: 0585
Signing time: Sat 06 Dec 2025 07:01:33 +0000
Manifest this update: Sat 06 Dec 2025 07:01:33 +0000
Manifest next update: Sun 07 Dec 2025 07:01:33 +0000
Files and hashes: 1: EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa (hash: QeMTexv2bHp61zdnXh2g6I+MqFr8HxGSohB7DT8On60=)
2: S9SaeWk9nkdoWP64FkIPH12BcyE.roa (hash: ehRbGk3byxJ3AiGY7eFZrHPEbDrx0o4nt9iPQOiTJ6M=)
3: a44sy3HYySYYWzX1Xc0gD8ljcUU.roa (hash: mG+H6uo6FVVDTMv9HhWuPrvRA4BkbeYs8ovYondFREA=)
4: j6zLrHFHe5QOXNQQPj7uYdthWRU.crl (hash: vkMtAl+ilfsf5nulCMmu8bPSSL9ZzwEUovvZKgM/7iU=)
5: t_igGhLq7IzbkQZnR3SxFZTI3tA.roa (hash: 6dLogSW/OhD3Yu1E3Y4ZKNcTx1tRF0Y/a9V0hhFyQW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:77:41:95:72:c6:22:e3:bb:20:4b:e8:19:a5:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
Validity
Not Before: Dec 6 07:01:33 2025 GMT
Not After : Dec 7 07:01:33 2025 GMT
Subject: CN=a4bdc122bbffc6b85acea15e1cbe40bcd4f659a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:48:2b:e9:5c:12:13:5b:86:b1:08:d8:9e:
7f:0f:09:d5:ea:10:a2:73:cb:65:9c:c4:7a:67:a8:
24:35:5c:67:af:e8:62:03:4e:be:f5:b9:14:57:9a:
15:96:9a:73:48:62:5d:f9:84:01:57:35:03:fe:b3:
30:d8:04:11:77:59:bb:ab:5e:fa:d0:a5:c4:63:94:
91:9b:54:d9:ec:f2:0a:fb:d3:a6:a3:fe:35:28:66:
91:2b:36:d9:c5:43:21:9b:6f:e4:46:a0:da:20:da:
4a:34:b3:c2:93:da:7c:47:e7:72:39:cf:29:e6:16:
9f:bb:64:6a:7f:3d:40:bc:e0:d3:ee:ab:cd:d4:19:
b9:95:9e:56:18:04:cb:aa:c3:d1:f0:b0:6d:4f:91:
39:4f:7c:3c:58:5b:c5:45:e0:83:2e:51:8d:e2:de:
21:59:8c:4e:8a:ff:29:e4:30:d8:e2:81:82:9b:d6:
4a:3b:04:94:91:26:98:a1:0a:c9:3d:ca:32:70:a6:
92:ea:da:13:1c:27:30:bf:e6:3b:e2:57:f1:d4:de:
f1:0c:c1:78:f2:e1:d0:01:35:3b:f1:52:9e:cd:7c:
b2:ca:cf:a7:8b:e2:b7:c0:e2:e4:2b:e6:14:0c:1a:
1d:86:fb:60:92:74:e9:97:4c:5e:d6:48:b8:42:c1:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:C1:22:BB:FF:C6:B8:5A:CE:A1:5E:1C:BE:40:BC:D4:F6:59:A9
X509v3 Authority Key Identifier:
keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:eb:3e:49:2a:ac:17:67:25:9e:92:f1:8a:0a:25:e2:7f:81:
51:ea:33:db:a5:77:22:6d:84:5a:51:a3:b3:0e:78:99:98:e9:
c0:ac:73:02:55:7e:db:dd:86:e1:0a:2a:b0:7c:8c:2f:cd:15:
9b:95:64:ec:14:3f:df:36:90:0b:f4:66:e3:2e:c5:47:4c:8e:
bc:f5:7c:c1:98:ea:8a:15:76:a3:57:b7:54:9f:7e:3e:6e:84:
34:06:95:72:2a:9c:f8:01:a5:f0:08:0a:ac:6c:3d:d4:f4:48:
f6:51:fa:27:8a:40:e1:76:66:29:33:84:44:bb:15:f1:f5:4a:
43:fa:cf:92:e1:22:c2:0c:1e:0b:92:65:dc:b0:df:07:02:65:
94:4c:05:75:d5:6a:dd:4e:e8:3a:23:3b:a6:39:16:b1:40:4d:
0c:b3:1c:43:29:9f:97:fa:60:1f:06:73:2a:d4:63:b3:a7:4f:
b4:e8:e6:60:08:67:24:b9:0a:03:34:4e:d2:2f:db:50:e7:34:
6a:ef:e6:10:5c:53:4d:41:cd:9e:ef:23:c8:37:73:4a:d2:bf:
51:c3:46:3c:91:bc:9a:07:13:87:d3:da:8b:68:48:e8:5e:09:
6f:5f:e3:1a:6c:8d:ac:c4:2d:17:21:3a:05:6f:f6:d1:cd:b8:
c0:d7:41:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:00:23 2025 by rpki-client